CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.
Explanation of Vulnerability in Simple Terms
Photo Gallery by Ays versions before 5.7.1 contain an input validation flaw that allows high-privileged users to modify site data. An administrator or similarly privileged account can trigger integrity or availability issues through the gallery interface. The vulnerability requires administrative access and does not affect confidentiality.
What an attacker can do
Modify or disrupt site data via the gallery interface.
Potential impact on your site
An admin account with malicious intent or compromised credentials could corrupt gallery data or cause service disruption.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
Related vulnerabilities
